Integrated Dell Remote Access Controller Idrac (Dell) - vulnerabilities (CVEs)

24 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2022-01-25. Vendor: Dell.

CVEs of Integrated Dell Remote Access Controller Idrac

• CVE-2021-36348 - CVSS 8.1 (high), 2022-01-25: iDRAC9 versions prior to 5.00.20.00 contain an input injection vulnerability. A remote authenticated malicious user with low privileges may potentially…
• CVE-2021-36347 - CVSS 7.2 (high), 2022-01-25: iDRAC9 versions prior to 5.00.20.00 and iDRAC8 versions prior to 2.82.82.82 contain a stack-based buffer overflow vulnerability. An authenticated remote…
• CVE-2021-36346 - CVSS 5.3 (medium), 2022-01-25: Dell iDRAC 8 prior to version 2.82.82.82 contain a denial of service vulnerability. An unauthenticated remote attacker could potentially exploit this…
• CVE-2021-36301 - CVSS 7.2 (high), 2021-11-23: Dell iDRAC 9 prior to version 4.40.40.00 and iDRAC 8 prior to version 2.80.80.80 contain a Stack Buffer Overflow in Racadm. An authenticated remote attacker…
• CVE-2021-36300 - CVSS 8.2 (high), 2021-11-23: iDRAC9 versions prior to 5.00.00.00 contain an improper input validation vulnerability. An unauthenticated remote attacker may potentially exploit this…
• CVE-2021-36299 - CVSS 8.1 (high), 2021-11-23: Dell iDRAC9 versions 4.40.00.00 and later, but prior to 4.40.29.00 and 5.00.00.00 contain an SQL injection vulnerability. A remote authenticated malicious…
• CVE-2021-21581 - CVSS 6.5 (medium), 2021-08-03: Dell EMC iDRAC9 versions prior to 5.00.00.00 contain a cross-site scripting vulnerability. A remote attacker could potentially exploit this vulnerability to…
• CVE-2021-21580 - CVSS 4.3 (medium), 2021-08-03: Dell EMC iDRAC8 versions prior to 2.80.80.80 & Dell EMC iDRAC9 versions prior to 5.00.00.00 contain a Content spoofing / Text injection, where a malicious URL…
• CVE-2021-21579 - CVSS 6.1 (medium), 2021-08-03: Dell EMC iDRAC9 versions prior to 4.40.40.00 contain an open redirect vulnerability. A remote unauthenticated attacker may exploit this vulnerability to…
• CVE-2021-21578 - CVSS 6.1 (medium), 2021-08-03: Dell EMC iDRAC9 versions prior to 4.40.40.00 contain an open redirect vulnerability. A remote unauthenticated attacker may exploit this vulnerability to…
• CVE-2021-21577 - CVSS 6.1 (medium), 2021-08-03: Dell EMC iDRAC9 versions prior to 4.40.40.00 contain a DOM-based cross-site scripting vulnerability. A remote attacker could potentially exploit this…
• CVE-2021-21576 - CVSS 6.1 (medium), 2021-08-03: Dell EMC iDRAC9 versions prior to 4.40.40.00 contain a DOM-based cross-site scripting vulnerability. A remote attacker could potentially exploit this…
• CVE-2021-21538 - CVSS 10 (critical), 2021-07-29: Dell EMC iDRAC9 versions 4.40.00.00 and later, but prior to 4.40.10.00, contain an improper authentication vulnerability. A remote unauthenticated attacker…
• CVE-2021-21541 - CVSS 6.1 (medium), 2021-04-30: Dell EMC iDRAC9 versions prior to 4.40.00.00 contain a DOM-based cross-site scripting vulnerability. A remote unauthenticated attacker could potentially…
• CVE-2021-21544 - CVSS 2.7 (low), 2021-04-30: Dell EMC iDRAC9 versions prior to 4.40.00.00 contain an improper authentication vulnerability. A remote authenticated malicious user with high privileges…
• CVE-2021-21540 - CVSS 8.1 (high), 2021-04-30: Dell EMC iDRAC9 versions prior to 4.40.00.00 contain a stack-based overflow vulnerability. A remote authenticated attacker could potentially exploit this…
• CVE-2021-21543 - CVSS 4.8 (medium), 2021-04-30: Dell EMC iDRAC9 versions prior to 4.40.00.00 contain multiple stored cross-site scripting vulnerabilities. A remote authenticated malicious user with high…
• CVE-2021-21539 - CVSS 7.1 (high), 2021-04-30: Dell EMC iDRAC9 versions prior to 4.40.00.00 contain a Time-of-check Time-of-use (TOCTOU) race condition vulnerability. A remote authenticated attacker could…
• CVE-2021-21542 - CVSS 4.8 (medium), 2021-04-30: Dell EMC iDRAC9 versions prior to 4.40.10.00 contain multiple stored cross-site scripting vulnerabilities. A remote authenticated malicious user with high…
• CVE-2021-21510 - CVSS 6.1 (medium), 2021-03-08: Dell iDRAC8 versions prior to 2.75.100.75 contain a host header injection vulnerability. A remote unauthenticated attacker may potentially exploit this…
• CVE-2020-26198 - CVSS 6.1 (medium), 2020-12-16: Dell EMC iDRAC9 versions prior to 4.32.10.00 and 4.40.00.00 contain a reflected cross-site scripting vulnerability in the iDRAC9 web application. A remote…
• CVE-2020-5366 - CVSS 7.1 (high), 2020-07-09: Dell EMC iDRAC9 versions prior to 4.20.20.20 contain a Path Traversal Vulnerability. A remote authenticated malicious user with low privileges could…
• CVE-2020-5344 - CVSS 9.8 (critical), 2020-03-31: Dell EMC iDRAC7, iDRAC8 and iDRAC9 versions prior to 2.65.65.65, 2.70.70.70, 4.00.00.00 contain a stack-based buffer overflow vulnerability. An…
• CVE-2019-3764 - CVSS 5 (medium), 2019-11-07: Dell EMC iDRAC7 versions prior to 2.65.65.65, iDRAC8 versions prior to 2.70.70.70 and iDRAC9 versions prior to 3.36.36.36 contain an improper authorization…